• 15 Posts
  • 75 Comments
Joined 2 years ago
cake
Cake day: June 19th, 2023

help-circle

  • also here is the output of iptables -L again with markdown:

    Chain INPUT (policy DROP) target prot opt source destination
    windscribe_input all -- anywhere anywhere /* Windscribe client rule / ufw-before-logging-input all -- anywhere anywhere
    ufw-before-input all -- anywhere anywhere
    ufw-after-input all -- anywhere anywhere
    ufw-after-logging-input all -- anywhere anywhere
    ufw-reject-input all -- anywhere anywhere
    ufw-track-input all -- anywhere anywhere
    windscribe_block all -- anywhere anywhere / Windscribe client rule */
    Chain FORWARD (policy DROP) target prot opt source destination
    ufw-before-logging-forward all -- anywhere anywhere
    ufw-before-forward all -- anywhere anywhere
    ufw-after-forward all -- anywhere anywhere
    ufw-after-logging-forward all -- anywhere anywhere
    ufw-reject-forward all -- anywhere anywhere
    ufw-track-forward all -- anywhere anywhere
    Chain OUTPUT (policy ACCEPT) target prot opt source destination
    windscribe_output all -- anywhere anywhere /* Windscribe client rule / windscribe_dnsleaks all -- anywhere anywhere / Windscribe client dns leak protection / ufw-before-logging-output all -- anywhere anywhere
    ufw-before-output all -- anywhere anywhere
    ufw-after-output all -- anywhere anywhere
    ufw-after-logging-output all -- anywhere anywhere
    ufw-reject-output all -- anywhere anywhere
    ufw-track-output all -- anywhere anywhere
    windscribe_block all -- anywhere anywhere / Windscribe client rule */
    Chain ufw-after-forward (1 references) target prot opt source destination
    Chain ufw-after-input (1 references) target prot opt source destination
    ufw-skip-to-policy-input udp -- anywhere anywhere udp dpt:netbios-ns ufw-skip-to-policy-input udp -- anywhere anywhere udp dpt:netbios-dgm ufw-skip-to-policy-input tcp -- anywhere anywhere tcp dpt:netbios-ssn ufw-skip-to-policy-input tcp -- anywhere anywhere tcp dpt:microsoft-ds ufw-skip-to-policy-input udp -- anywhere anywhere udp dpt:bootps ufw-skip-to-policy-input udp -- anywhere anywhere udp dpt:bootpc ufw-skip-to-policy-input all -- anywhere anywhere ADDRTYPE match dst-type BROADCAST
    Chain ufw-after-logging-forward (1 references) target prot opt source destination
    Chain ufw-after-logging-input (1 references) target prot opt source destination
    Chain ufw-after-logging-output (1 references) target prot opt source destination
    Chain ufw-after-output (1 references) target prot opt source destination
    Chain ufw-before-forward (1 references) target prot opt source destination
    ACCEPT all -- anywhere anywhere ctstate RELATED,ESTABLISHED ACCEPT icmp -- anywhere anywhere icmp destination-unreachable ACCEPT icmp -- anywhere anywhere icmp time-exceeded ACCEPT icmp -- anywhere anywhere icmp parameter-problem ACCEPT icmp -- anywhere anywhere icmp echo-request ufw-user-forward all -- anywhere anywhere
    Chain ufw-before-input (1 references) target prot opt source destination
    ACCEPT all -- anywhere anywhere
    ACCEPT all -- anywhere anywhere ctstate RELATED,ESTABLISHED ufw-logging-deny all -- anywhere anywhere ctstate INVALID DROP all -- anywhere anywhere ctstate INVALID ACCEPT icmp -- anywhere anywhere icmp destination-unreachable ACCEPT icmp -- anywhere anywhere icmp time-exceeded ACCEPT icmp -- anywhere anywhere icmp parameter-problem ACCEPT icmp -- anywhere anywhere icmp echo-request ACCEPT udp -- anywhere anywhere udp spt:bootps dpt:bootpc ufw-not-local all -- anywhere anywhere
    ACCEPT udp -- anywhere mdns.mcast.net udp dpt:mdns ACCEPT udp -- anywhere 239.255.255.250 udp dpt:1900 ufw-user-input all -- anywhere anywhere
    Chain ufw-before-logging-forward (1 references) target prot opt source destination
    Chain ufw-before-logging-input (1 references) target prot opt source destination
    Chain ufw-before-logging-output (1 references) target prot opt source destination
    Chain ufw-before-output (1 references) target prot opt source destination
    ACCEPT all -- anywhere anywhere
    ACCEPT all -- anywhere anywhere ctstate RELATED,ESTABLISHED ufw-user-output all -- anywhere anywhere
    Chain ufw-logging-allow (0 references) target prot opt source destination
    Chain ufw-logging-deny (2 references) target prot opt source destination
    Chain ufw-not-local (1 references) target prot opt source destination
    RETURN all -- anywhere anywhere ADDRTYPE match dst-type LOCAL RETURN all -- anywhere anywhere ADDRTYPE match dst-type MULTICAST RETURN all -- anywhere anywhere ADDRTYPE match dst-type BROADCAST ufw-logging-deny all -- anywhere anywhere limit: avg 3/min burst 10 DROP all -- anywhere anywhere
    Chain ufw-reject-forward (1 references) target prot opt source destination
    Chain ufw-reject-input (1 references) target prot opt source destination
    Chain ufw-reject-output (1 references) target prot opt source destination
    Chain ufw-skip-to-policy-forward (0 references) target prot opt source destination
    DROP all -- anywhere anywhere
    Chain ufw-skip-to-policy-input (7 references) target prot opt source destination
    DROP all -- anywhere anywhere
    Chain ufw-skip-to-policy-output (0 references) target prot opt source destination
    ACCEPT all -- anywhere anywhere
    Chain ufw-track-forward (1 references) target prot opt source destination
    Chain ufw-track-input (1 references) target prot opt source destination
    Chain ufw-track-output (1 references) target prot opt source destination
    ACCEPT tcp -- anywhere anywhere ctstate NEW ACCEPT udp -- anywhere anywhere ctstate NEW
    Chain ufw-user-forward (1 references) target prot opt source destination
    Chain ufw-user-input (1 references) target prot opt source destination
    ACCEPT tcp -- anywhere anywhere tcp dpt:22000 /* 'dapp_syncthing' / ACCEPT udp -- anywhere anywhere udp dpt:22000 / 'dapp_syncthing' / ACCEPT udp -- anywhere anywhere udp dpt:21027 / 'dapp_syncthing' */ ACCEPT tcp -- anywhere anywhere tcp dpt:ssh ACCEPT tcp -- anywhere anywhere tcp dpt:10387 ACCEPT udp -- anywhere anywhere udp dpt:10387
    Chain ufw-user-limit (0 references) target prot opt source destination
    REJECT all -- anywhere anywhere reject-with icmp-port-unreachable
    Chain ufw-user-limit-accept (0 references) target prot opt source destination
    ACCEPT all -- anywhere anywhere
    Chain ufw-user-logging-forward (0 references) target prot opt source destination
    RETURN all -- anywhere anywhere
    Chain ufw-user-logging-input (0 references) target prot opt source destination
    RETURN all -- anywhere anywhere
    Chain ufw-user-logging-output (0 references) target prot opt source destination
    RETURN all -- anywhere anywhere
    Chain ufw-user-output (1 references) target prot opt source destination
    Chain windscribe_block (2 references) target prot opt source destination
    DROP all -- anywhere anywhere /* Windscribe client rule */
    Chain windscribe_dnsleaks (1 references) target prot opt source destination
    DROP udp -- anywhere dns9.quad9.net udp dpt:domain /* Windscribe client dns leak protection / DROP tcp -- anywhere dns9.quad9.net tcp dpt:domain / Windscribe client dns leak protection */
    Chain windscribe_input (1 references) target prot opt source destination
    ACCEPT all -- anywhere anywhere /* Windscribe client rule / ACCEPT udp -- anywhere anywhere udp spts:bootps:bootpc dpts:bootps:bootpc / Windscribe client rule / ACCEPT all -- GTS anywhere / Windscribe client rule / DROP all -- 192.168.0.0/16 anywhere / Windscribe client rule / DROP all -- 172.16.0.0/12 anywhere / Windscribe client rule / DROP all -- 169.254.0.0/16 anywhere / Windscribe client rule / ACCEPT all -- 10.255.255.0/24 anywhere / Windscribe client rule / DROP all -- 10.0.0.0/8 anywhere / Windscribe client rule / DROP all -- base-address.mcast.net/4 anywhere / Windscribe client rule / ACCEPT all -- anywhere anywhere / Windscribe client rule / ACCEPT all -- 146.70.203.19 anywhere / Windscribe client rule / ACCEPT all -- localhost anywhere / Windscribe client rule / ACCEPT all -- localhost/8 anywhere / Windscribe client rule / ACCEPT all -- 192.168.0.0/16 anywhere / Windscribe client rule / ACCEPT all -- 172.16.0.0/12 anywhere / Windscribe client rule / ACCEPT all -- 169.254.0.0/16 anywhere / Windscribe client rule / DROP all -- 10.255.255.0/24 anywhere / Windscribe client rule / ACCEPT all -- 10.0.0.0/8 anywhere / Windscribe client rule / ACCEPT all -- base-address.mcast.net/4 anywhere / Windscribe client rule */
    Chain windscribe_output (1 references) target prot opt source destination
    ACCEPT all -- anywhere anywhere /* Windscribe client rule / ACCEPT udp -- anywhere anywhere udp spts:bootps:bootpc dpts:bootps:bootpc / Windscribe client rule / ACCEPT all -- anywhere GTS / Windscribe client rule / DROP all -- anywhere 192.168.0.0/16 / Windscribe client rule / DROP all -- anywhere 172.16.0.0/12 / Windscribe client rule / DROP all -- anywhere 169.254.0.0/16 / Windscribe client rule / ACCEPT all -- anywhere 10.255.255.0/24 / Windscribe client rule / DROP all -- anywhere 10.0.0.0/8 / Windscribe client rule / DROP all -- anywhere base-address.mcast.net/4 / Windscribe client rule / ACCEPT all -- anywhere anywhere / Windscribe client rule / ACCEPT all -- anywhere 146.70.203.19 owner GID match root / Windscribe client rule / ACCEPT all -- anywhere 146.70.203.19 owner GID match windscribe / Windscribe client rule / ACCEPT all -- anywhere 146.70.203.19 ! owner UID match 0-4294967294 / Windscribe client rule / ACCEPT all -- anywhere 146.70.203.19 mark match 0xca6c / Windscribe client rule / ACCEPT all -- anywhere localhost / Windscribe client rule / ACCEPT all -- anywhere localhost/8 / Windscribe client rule / ACCEPT all -- anywhere 192.168.0.0/16 / Windscribe client rule / ACCEPT all -- anywhere 172.16.0.0/12 / Windscribe client rule / ACCEPT all -- anywhere 169.254.0.0/16 / Windscribe client rule / DROP all -- anywhere 10.255.255.0/24 / Windscribe client rule / ACCEPT all -- anywhere 10.0.0.0/8 / Windscribe client rule / ACCEPT all -- anywhere base-address.mcast.net/4 / Windscribe client rule */
    

  • ok thank you for your time here is the output of ip6tables -L:

    Chain INPUT (policy DROP) target prot opt source destination
    ufw6-before-logging-input all -- anywhere anywhere
    ufw6-before-input all -- anywhere anywhere
    ufw6-after-input all -- anywhere anywhere
    ufw6-after-logging-input all -- anywhere anywhere
    ufw6-reject-input all -- anywhere anywhere
    ufw6-track-input all -- anywhere anywhere
    windscribe_input all -- anywhere anywhere /* Windscribe client rule */
    Chain FORWARD (policy DROP) target prot opt source destination
    ufw6-before-logging-forward all -- anywhere anywhere
    ufw6-before-forward all -- anywhere anywhere
    ufw6-after-forward all -- anywhere anywhere
    ufw6-after-logging-forward all -- anywhere anywhere
    ufw6-reject-forward all -- anywhere anywhere
    ufw6-track-forward all -- anywhere anywhere
    Chain OUTPUT (policy ACCEPT) target prot opt source destination
    ufw6-before-logging-output all -- anywhere anywhere
    ufw6-before-output all -- anywhere anywhere
    ufw6-after-output all -- anywhere anywhere
    ufw6-after-logging-output all -- anywhere anywhere
    ufw6-reject-output all -- anywhere anywhere
    ufw6-track-output all -- anywhere anywhere
    windscribe_output all -- anywhere anywhere /* Windscribe client rule */
    Chain ufw6-after-forward (1 references) target prot opt source destination
    Chain ufw6-after-input (1 references) target prot opt source destination
    ufw6-skip-to-policy-input udp -- anywhere anywhere udp dpt:netbios-ns ufw6-skip-to-policy-input udp -- anywhere anywhere udp dpt:netbios-dgm ufw6-skip-to-policy-input tcp -- anywhere anywhere tcp dpt:netbios-ssn ufw6-skip-to-policy-input tcp -- anywhere anywhere tcp dpt:microsoft-ds ufw6-skip-to-policy-input udp -- anywhere anywhere udp dpt:dhcpv6-client ufw6-skip-to-policy-input udp -- anywhere anywhere udp dpt:dhcpv6-server
    Chain ufw6-after-logging-forward (1 references) target prot opt source destination
    Chain ufw6-after-logging-input (1 references) target prot opt source destination
    Chain ufw6-after-logging-output (1 references) target prot opt source destination
    Chain ufw6-after-output (1 references) target prot opt source destination
    Chain ufw6-before-forward (1 references) target prot opt source destination
    DROP all -- anywhere anywhere rt type:0 ACCEPT all -- anywhere anywhere ctstate RELATED,ESTABLISHED ACCEPT ipv6-icmp -- anywhere anywhere ipv6-icmp destination-unreachable ACCEPT ipv6-icmp -- anywhere anywhere ipv6-icmp packet-too-big ACCEPT ipv6-icmp -- anywhere anywhere ipv6-icmp time-exceeded ACCEPT ipv6-icmp -- anywhere anywhere ipv6-icmp parameter-problem ACCEPT ipv6-icmp -- anywhere anywhere ipv6-icmp echo-request ACCEPT ipv6-icmp -- anywhere anywhere ipv6-icmp echo-reply ufw6-user-forward all -- anywhere anywhere
    Chain ufw6-before-input (1 references) target prot opt source destination
    ACCEPT all -- anywhere anywhere
    DROP all -- anywhere anywhere rt type:0 ACCEPT all -- anywhere anywhere ctstate RELATED,ESTABLISHED ACCEPT ipv6-icmp -- anywhere anywhere ipv6-icmp echo-reply ufw6-logging-deny all -- anywhere anywhere ctstate INVALID DROP all -- anywhere anywhere ctstate INVALID ACCEPT ipv6-icmp -- anywhere anywhere ipv6-icmp destination-unreachable ACCEPT ipv6-icmp -- anywhere anywhere ipv6-icmp packet-too-big ACCEPT ipv6-icmp -- anywhere anywhere ipv6-icmp time-exceeded ACCEPT ipv6-icmp -- anywhere anywhere ipv6-icmp parameter-problem ACCEPT ipv6-icmp -- anywhere anywhere ipv6-icmp echo-request ACCEPT ipv6-icmp -- anywhere anywhere ipv6-icmp router-solicitation HL match HL == 255 ACCEPT ipv6-icmp -- anywhere anywhere ipv6-icmp router-advertisement HL match HL == 255 ACCEPT ipv6-icmp -- anywhere anywhere ipv6-icmp neighbour-solicitation HL match HL == 255 ACCEPT ipv6-icmp -- anywhere anywhere ipv6-icmp neighbour-advertisement HL match HL == 255 ACCEPT ipv6-icmp -- anywhere anywhere ipv6-icmptype 141 HL match HL == 255 ACCEPT ipv6-icmp -- anywhere anywhere ipv6-icmptype 142 HL match HL == 255 ACCEPT ipv6-icmp -- fe80::/10 anywhere ipv6-icmp mld-listener-query ACCEPT ipv6-icmp -- fe80::/10 anywhere ipv6-icmp mld-listener-report ACCEPT ipv6-icmp -- fe80::/10 anywhere ipv6-icmp mld-listener-done ACCEPT ipv6-icmp -- fe80::/10 anywhere ipv6-icmptype 143 ACCEPT ipv6-icmp -- anywhere anywhere ipv6-icmptype 148 HL match HL == 255 ACCEPT ipv6-icmp -- anywhere anywhere ipv6-icmptype 149 HL match HL == 255 ACCEPT ipv6-icmp -- fe80::/10 anywhere ipv6-icmptype 151 HL match HL == 1 ACCEPT ipv6-icmp -- fe80::/10 anywhere ipv6-icmptype 152 HL match HL == 1 ACCEPT ipv6-icmp -- fe80::/10 anywhere ipv6-icmptype 153 HL match HL == 1 ACCEPT ipv6-icmp -- anywhere anywhere ipv6-icmptype 144 ACCEPT ipv6-icmp -- anywhere anywhere ipv6-icmptype 145 ACCEPT ipv6-icmp -- anywhere anywhere ipv6-icmptype 146 ACCEPT ipv6-icmp -- anywhere anywhere ipv6-icmptype 147 ACCEPT udp -- fe80::/10 fe80::/10 udp spt:dhcpv6-server dpt:dhcpv6-client ACCEPT udp -- anywhere ff02::fb udp dpt:mdns ACCEPT udp -- anywhere ff02::f udp dpt:1900 ufw6-user-input all -- anywhere anywhere
    Chain ufw6-before-logging-forward (1 references) target prot opt source destination
    Chain ufw6-before-logging-input (1 references) target prot opt source destination
    Chain ufw6-before-logging-output (1 references) target prot opt source destination
    Chain ufw6-before-output (1 references) target prot opt source destination
    ACCEPT all -- anywhere anywhere
    DROP all -- anywhere anywhere rt type:0 ACCEPT all -- anywhere anywhere ctstate RELATED,ESTABLISHED ACCEPT ipv6-icmp -- anywhere anywhere ipv6-icmp destination-unreachable ACCEPT ipv6-icmp -- anywhere anywhere ipv6-icmp packet-too-big ACCEPT ipv6-icmp -- anywhere anywhere ipv6-icmp time-exceeded ACCEPT ipv6-icmp -- anywhere anywhere ipv6-icmp parameter-problem ACCEPT ipv6-icmp -- anywhere anywhere ipv6-icmp echo-request ACCEPT ipv6-icmp -- anywhere anywhere ipv6-icmp echo-reply ACCEPT ipv6-icmp -- anywhere anywhere ipv6-icmp router-solicitation HL match HL == 255 ACCEPT ipv6-icmp -- anywhere anywhere ipv6-icmp neighbour-advertisement HL match HL == 255 ACCEPT ipv6-icmp -- anywhere anywhere ipv6-icmp neighbour-solicitation HL match HL == 255 ACCEPT ipv6-icmp -- anywhere anywhere ipv6-icmp router-advertisement HL match HL == 255 ACCEPT ipv6-icmp -- anywhere anywhere ipv6-icmptype 141 HL match HL == 255 ACCEPT ipv6-icmp -- anywhere anywhere ipv6-icmptype 142 HL match HL == 255 ACCEPT ipv6-icmp -- fe80::/10 anywhere ipv6-icmp mld-listener-query ACCEPT ipv6-icmp -- fe80::/10 anywhere ipv6-icmp mld-listener-report ACCEPT ipv6-icmp -- fe80::/10 anywhere ipv6-icmp mld-listener-done ACCEPT ipv6-icmp -- fe80::/10 anywhere ipv6-icmptype 143 ACCEPT ipv6-icmp -- anywhere anywhere ipv6-icmptype 148 HL match HL == 255 ACCEPT ipv6-icmp -- anywhere anywhere ipv6-icmptype 149 HL match HL == 255 ACCEPT ipv6-icmp -- fe80::/10 anywhere ipv6-icmptype 151 HL match HL == 1 ACCEPT ipv6-icmp -- fe80::/10 anywhere ipv6-icmptype 152 HL match HL == 1 ACCEPT ipv6-icmp -- fe80::/10 anywhere ipv6-icmptype 153 HL match HL == 1 ufw6-user-output all -- anywhere anywhere
    Chain ufw6-logging-allow (0 references) target prot opt source destination
    Chain ufw6-logging-deny (1 references) target prot opt source destination
    Chain ufw6-reject-forward (1 references) target prot opt source destination
    Chain ufw6-reject-input (1 references) target prot opt source destination
    Chain ufw6-reject-output (1 references) target prot opt source destination
    Chain ufw6-skip-to-policy-forward (0 references) target prot opt source destination
    DROP all -- anywhere anywhere
    Chain ufw6-skip-to-policy-input (6 references) target prot opt source destination
    DROP all -- anywhere anywhere
    Chain ufw6-skip-to-policy-output (0 references) target prot opt source destination
    ACCEPT all -- anywhere anywhere
    Chain ufw6-track-forward (1 references) target prot opt source destination
    Chain ufw6-track-input (1 references) target prot opt source destination
    Chain ufw6-track-output (1 references) target prot opt source destination
    ACCEPT tcp -- anywhere anywhere ctstate NEW ACCEPT udp -- anywhere anywhere ctstate NEW
    Chain ufw6-user-forward (1 references) target prot opt source destination
    Chain ufw6-user-input (1 references) target prot opt source destination
    ACCEPT tcp -- anywhere anywhere tcp dpt:22000 /* 'dapp_syncthing' / ACCEPT udp -- anywhere anywhere udp dpt:22000 / 'dapp_syncthing' / ACCEPT udp -- anywhere anywhere udp dpt:21027 / 'dapp_syncthing' */ ACCEPT tcp -- anywhere anywhere tcp dpt:ssh ACCEPT tcp -- anywhere anywhere tcp dpt:10387 ACCEPT udp -- anywhere anywhere udp dpt:10387
    Chain ufw6-user-limit (0 references) target prot opt source destination
    REJECT all -- anywhere anywhere reject-with icmp6-port-unreachable
    Chain ufw6-user-limit-accept (0 references) target prot opt source destination
    ACCEPT all -- anywhere anywhere
    Chain ufw6-user-logging-forward (0 references) target prot opt source destination
    RETURN all -- anywhere anywhere
    Chain ufw6-user-logging-input (0 references) target prot opt source destination
    RETURN all -- anywhere anywhere
    Chain ufw6-user-logging-output (0 references) target prot opt source destination
    RETURN all -- anywhere anywhere
    Chain ufw6-user-output (1 references) target prot opt source destination
    Chain windscribe_input (1 references) target prot opt source destination
    ACCEPT all -- ip6-localhost anywhere /* Windscribe client rule / DROP all -- anywhere anywhere / Windscribe client rule */
    Chain windscribe_output (1 references) target prot opt source destination
    ACCEPT all -- anywhere ip6-localhost /* Windscribe client rule / DROP all -- anywhere anywhere / Windscribe client rule */
    














  • Thanks I have already known about mint forum and archwiki and I think I asked about stuff here atleast afew time before and got pretty good insight from you guys (which I’m thankful for) but I can’t ask around every single simple problem I face with also I should have added that I don’t blindly follow anything ChatGPT or any AI spits out and you’re absolutely right some of solutions ChatGPT suggests are outdated (I did manual partitioning and it tried to convince me that I need a swap partition which I realized nobody is doing nowadays) but I should say many of not too complicated stuff it gets right too it’s just tool like everything else you should be aware of it’s shortcomings as well as advantages. Hope that made sense edit: typo